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AMENDMENTS TO THE CLAIMS 

1-55 (Canceled) 

56. (Currently Amended) A method of authorizing a portable communication 
device to access a network resource, the method being performed at a network 
management system in communication with the portable communication device via a 
network, the method comprising: 

receiving, from a portable communication device via a network, a request 
to access a network resource, the request being configured with network 
settings that do not correspond to the network; 

determining, on a processor, whether the portable communication device 
is authorized to access the requested network resource, the determination being 
based at least in part on comparing an attribute included in the request to a user 
profile database; and 

redirecting, upon determining that the portable communication device is 
not authorized to access the requested network resource, the portable network 
device to an authentication system, by performing a method comprising: 
storing the request to access the network resource; 
communicating a modified request to a redirection server, the 
modified request being based upon the request to access the network 
resource; 

receiving, from the redirection server, a browser redirect message 
comprising a resource locator that identifies the authentication system, 
the browser redirect message configured to cause the portable 
communication device to be redirected to the authentication system; and 

sending, to the portable communication device, a modified browser 
redirect message based upon the browser redirect message, the modified 
browser redirect message configured to-be-FespGRsive4G-4l^e-Feqyes^4G 
a€Ge66-4he-netw9fl^M^esQyfGe indicate that it was sent by the network 
resource: 
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whereby the portable communication device is enabled, by being 
redirected to the authentication system, to submit authentication-related 
information so that the portable communication system may be authorized to 
access the requested network resource. 

57. (Previously Presented) The method of Claim 56, further comprising 
updating the user profile database upon determining that the portable communication 
device is entitled to access the requested network resource. 

58. (Previously Presented) The method of Claim 56, further comprising 
maintaining in the user profile database a historical log of the portable communication 
device's access to the destination network. 

59. (Previously Presented) The method of Claim 56, wherein the request is 
an HTTP request. 

60. (Previously Presented) The method of Claim 56, wherein determining 
whether to authorize the portable communication device to access the requested 
network resource further comprises denying the portable communication device access 
where the user profile database indicates that the portable communication device may 
not access the destination network. 

61. (Previously Presented) The method of Claim 56, wherein the attribute 
included in the request is one of a port, circuit ID, VLAN ID or MAC address. 

62. (Previously Presented) The method of Claim 56, further comprising: 
receiving, from the portable communication device, a second request to 

access a second network resource; and 

determining that the portable communication device is authorized to 
access the second network resource, based at least upon a MAC address 
included in the second request. 
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63. (Currently Amended) A network management system configured to 
manage authorization of a portable communication device to access a network 
resource, the system comprising: 

a network communications interface configured to receive, from a portable 
communication device via a network, a request to access a network resource, 
the request comprising a resource locator that identifies the network resource, 
the request being configured with network settings that do not correspond to the 
network; and 

a processor configured to determine whether the portable communication 
device is authorized to access the requested network resource, the 
determination being based at least in part on comparing an attribute included in 
the request to a user profile database; 

the processor further configured to redirect, upon determining that the 
portable communication device is not authorized to access the requested 
network resource, the portable network device to an authentication system, by 
performing a method comprising: 

storing the request to access the network resource; 
communicating a modified request to a redirection server, the 

modified request being based upon the request to access the network 

resource; 

receiving, from the redirection server, a browser redirect message 
comprising a second resource locator that identifies the authentication 
system, the browser redirect message configured to cause the portable 
communication device to be redirected to the authentication system; and 

sending, to the portable communication device, a modified browser 
redirect message based upon the browser redirect message, the modified 
browser redirect message €onfi§yfed-tG-be-FespGnsjve4G-4l^e-Fequest-4G 
access-indicating it originated from the network resource; 
whereby the portable communication device is enabled, by being 
redirected to the authentication system, to submit authentication-related 
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information so that the portable communication system may be authorized to 
access the requested network resource. 

64. (Previously Presented) The network management system of Claim 63, 
wherein the processor is further configured to maintain, in the user profile database, a 
historical log of the portable communication device's access to the destination network. 

65. (Previously Presented) The network management system of Claim 63, 
wherein the request is an HTTP request. 

66. (Previously Presented) The network management system of Claim 63, 
wherein determining whether to authorize the portable communication device to access 
the requested network resource further comprises denying the portable communication 
device access where the user profile database indicates that the portable 
communication device may not access the destination network. 

67. (Previously Presented) The network management system of Claim 63, 
wherein the attribute included in the request is one of a port, circuit ID, VLAN ID or 
MAC address. 

68. (Previously Presented) The network management system of Claim 63, 
wherein the network interface is further configured to receive, from the portable 
communication device, a second request to access a second network resource, and 
wherein the processor is further configured to determine that the portable 
communication device is authorized to access the second network resource, based at 
least upon a MAC address included in the second request. 

69. (New) The system of Claim 63, wherein the user profile database further 
stores information relating to an authorized time period associated with the portable 
communication device, and wherein the determination of whether the portable 
communication device is authorized to access the requested network resource is 
further based on an amount of time that has elapsed in relation to the authorized time 
period stored in the user profile database. 

70. (New) The system of Claim 63, wherein the attribute included in the 
request comprises a link-layer header of a network packet, and wherein the 
determination of whether the portable communication device is authorized to access 
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the requested network resource is based both on the link-layer header of the network 
packet and on identification information provided automatically by a browser of the 
portable communication device. 

71 . (New) The method of Claim 56, wherein the modified request comprises a 
change to one or more attributes within the request. 

72. (New) The method of Claim 71 , wherein the request is a network packet. 

73. (New) The method of Claim 72, wherein the one or more attributes within 
the request are one or more of a source address, a checksum, and an application 
specific parameter. 

74. (New) The system of Claim 63, wherein the modified request comprises a 
change to one or more attributes within the request. 

75. (New) The system of Claim 74, wherein the request is a network packet. 

76. (New) The system of Claim 75, wherein the one or more attributes within 
the request are one or more of a source address, a checksum, and an application 
specific parameter. 
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77. (New) A method of accessing a network resource by a portable 
communication device, the method performed at a network management system in 
communication with the portable communication device, the method comprising: 

receiving, from a portable communication device, a request to access a 
network resource; 

determining, on one or more processors, whether the portable 
communication device is authorized to access the requested network resource, 
the determination being based at least in part on comparing an attribute included 
in the request to a user profile database; and 

redirecting, upon determining that the portable communication device is 
not authorized to access the requested network resource, the portable network 
device to an authentication system, by performing a method comprising: 

communicating a modified request to a redirection server, the 

modified request being based upon the request to access the network 

resource; 

receiving, from the redirection server, a browser redirect message 
comprising a resource locator that identifies the authentication system, 
the browser redirect message configured to cause the portable 
communication device to be redirected to the authentication system; and 

sending, to the portable communication device, a modified browser 
redirect message based upon the browser redirect message, the modified 
browser redirect message configured to indicate that it was sent by the 
network resource; 

whereby the portable communication device is enabled, by being 
redirected to the authentication system, to submit authentication-related 
information so that the portable communication system may be authorized to 
access the requested network resource. 

78. (New) The method of Claim 77, further comprising updating the user 
profile database upon determining that the portable communication device is entitled to 
access the requested network resource. 
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79. (New) The method of Claim 77, further comprising maintaining in the user 
profile database a historical log of the portable communication device's access to the 
destination network. 

80. (New) The method of Claim 77, wherein the request is an HTTP request. 

81 . (New) The method of Claim 77, wherein determining whether to authorize 
the portable communication device to access the requested network resource further 
comprises denying the portable communication device access where the user profile 
database indicates that the portable communication device may not access the 
destination network. 

82. (New) The method of Claim 77, wherein the attribute included in the 
request is one of a port, circuit ID, VLAN ID or MAC address. 

83. (New) The method of Claim 77, further comprising: 

receiving, from the portable communication device, a second request to 
access a second network resource; and 

determining that the portable communication device is authorized to 
access the second network resource, based at least upon a MAC address 
included in the second request. 

84. (New) The method of Claim 77, wherein the modified request comprises a 
change to one or more attributes within the request. 

85. (New) The method of Claim 84, wherein the request is a network packet. 

86. (New) The method of Claim 85, wherein the one or more attributes within 
the request are one or more of a source address, a checksum, and an application 
specific parameter. 
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87. (New) A network management system configured to manage access of a 
portable communication device to a network resource, the system comprising: 

a network communications interface configured to receive, from a portable 
communication device, a request to access a network resource, the request 
comprising a resource locator that identifies the network resource; and 

one or more processors configured to determine whether the portable 
communication device is authorized to access the requested network resource, 
the determination being based at least in part on comparing an attribute included 
in the request to a user profile database; 

the one or more processors further configured to redirect, upon 
determining that the portable communication device is not authorized to access 
the requested network resource, the portable network device to an 
authentication system, by performing a method comprising: 

communicating a modified request to a redirection server, the 

modified request being based upon the request to access the network 

resource; 

receiving, from the redirection server, a browser redirect message 
comprising a second resource locator that identifies the authentication 
system, the browser redirect message configured to cause the portable 
communication device to be redirected to the authentication system; and 

sending, to the portable communication device, a modified browser 
redirect message based upon the browser redirect message, the modified 
browser redirect message indicating it originated from the network 
resource; 

whereby the portable communication device is enabled, by being 
redirected to the authentication system, to submit authentication-related 
information so that the portable communication system may be authorized to 
access the requested network resource. 
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88. (New) The network management system of Claim 87, wherein the 
processor is further configured to maintain, in the user profile database, a historical log 
of the portable communication device's access to the destination network. 

89. (New) The network management system of Claim 87, wherein the request 
is an HTTP request. 

90. (New) The network management system of Claim 87, wherein 
determining whether to authorize the portable communication device to access the 
requested network resource further comprises denying the portable communication 
device access where the user profile database indicates that the portable 
communication device may not access the destination network. 

91. (New) The network management system of Claim 87, wherein the 
attribute included in the request is one of a port, circuit ID, VLAN ID or MAC address. 

92. (New) The network management system of Claim 87, wherein the network 
interface is further configured to receive, from the portable communication device, a 
second request to access a second network resource, and wherein the processor is 
further configured to determine that the portable communication device is authorized to 
access the second network resource, based at least upon a MAC address included in 
the second request. 

93. (New) The system of Claim 87, wherein the user profile database further 
stores information relating to an authorized time period associated with the portable 
communication device, and wherein the determination of whether the portable 
communication device is authorized to access the requested network resource is 
further based on an amount of time that has elapsed in relation to the authorized time 
period stored in the user profile database. 

94. (New) The system of Claim 87, wherein the attribute included in the 
request comprises a link-layer header of a network packet, and wherein the 
determination of whether the portable communication device is authorized to access 
the requested network resource is based both on the link-layer header of the network 
packet and on identification information provided automatically by a browser of the 
portable communication device. 
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95. (New) The system of Claim 87, wherein the modified request comprises a 
change to one or more attributes within the request. 

96. (New) The system of Claim 95, wherein the request is a network packet. 

97. (New) The system of Claim 96, wherein the one or more attributes within 
the request are one or more of a source address, a checksum, and an application 
specific parameter. 

98. (New) The system of Claim 87, wherein the one or more processors are 
further configured to store the request to access the network resource. 

99. (New) The system of Claim 87, wherein the portable communication 
device communicates with the network communications interface via a network. 

100. (New) The system of Claim 77, wherein redirecting further comprises 
storing the request to access the network resource. 

101. (New) The system of Claim 77, wherein receiving, from a portable 
communication device, a request to access a network resource comprises receiving, 
from a portable communication device via a network, a request to access a network 
resource. 
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